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Amendments to the Claims : 

The following listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1 . (Currently Amended) A method for using a partially encrypted document, 
comprising: 

issuing a document usage request for using the partially encrypted document in 

a session; 

authenticating the partially encrypted document; 

receiving authorization to use the partially encrypted document; 

receiving a session key for the session; 

receiving a proxy key that delegates decryption to the session; 

rendering a non-encrypted portion of the partially encrypted document; 

performing a proxy transformation on the partially rendered, partially 
encrypted document using the proxy key; and 

decrypting the proxy transformed, partially rendered, partially encrypted 
document using the session key, 

wherein the proxy key and the session key may bo are used to decrypt the 
partially encrypted document as part of the session rendering process only, thereby assuring 
that only rendered images of the decrypted document are available to an end user. 

2. (Previously Amended) The method for using a partially encrypted document 
of claim 1 , further comprising: 

retrieving terms and conditions of the session; 

retrieving usage parameters and system resource information for the session; 

and 
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comparing the retrieved usage parameters and system resources and the 
retrieved terms and conditions, wherein the authorized usage is based on comparison results 
of the retrieved usage parameters and system resources and the retrieved terms and 
conditions. 

3. (Previously Amended) The method for using a partially encrypted document 
of claim 2, wherein the retrieved terms and conditions are associated with at least one of 
identification of the partially encrypted document and usage type. 

4. (Previously Amended) The method for using a partially encrypted document 
of claim 1, wherein the document usage request contains at least one of document 
identification, usage type, and user identification. 

5. (Previously Amended) The method for using a Previously Amended 
document of claim 1 , wherein authenticating the Previously Amended document comprises at 
least one of: 

checking a digital signature associated with the Previously Amended 

document; and 

verifying integrity of each component of the Previously Amended document. 

6. (Currently Amended) A usage authorization system for using a partially 
encrypted document, comprising: 

a request receiving device that receives a document usage request for using the 
partially encrypted document in a session; 

a document processing device that authenticates the partially encrypted 

document; 

a document source that authorizes usage of the partially encrypted document, 
and issues a proxy key that delegates decryption to the session; 
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an access device that, along with the document device, creates a session key 

for the session, 

wherein the document processing device renders the partially encrypted 
document, performs proxy transformation on the rendered, partially encrypted document 
using the proxy keys, and decrypts the proxy transformed rendered partially encrypted 
document using the session key, 

wherein the proxy key and the session key may b e are used to decrypt the 
partially encrypted document as part of the session rendering process only, thereby assuring 
that only rendered images of the decrypted document are available to an end user. 

7. (Previously Amended) The usage authorization system for using a partially 
encrypted document of claim 6, wherein the document source retrieves terms and conditions 
of the session, retrieves usage parameters and system resource information for the session, 
and compares the retrieved usage parameters and system resources and the retrieved terms 
and conditions, the authorized usage being based on comparison results of the retrieved usage 
parameters and system resources and the retrieved terms and conditions. 

8. (Previously Amended) The usage authorization system for using a partially 
encrypted document of claim 7, wherein the retrieved terms and conditions are associated 
with at least one of identification of the partially encrypted document and usage type. 

9. (Previously Amended) The usage authorization system for using a partially 
encrypted document of claim 6, wherein the document usage request contains at least one of 
document identification, usage type, and user identification. 

10. (Previously Amended) The usage authorization system for using a partially 
encrypted document of claim 6, wherein the document processing device authenticates the 
partially encrypted document by at least one of: 



Xerox Docket No. D/99462 
Application No. 09/73 1 ,9 1 7 

checking a digital signature associated with the partially encrypted document; 

and 

verifying integrity of each component of the partially encrypted document. 

1 1 . (Previously Amended) The method for using a partially encrypted document 
of claim 1, wherein rendering a portion of the partially encrypted document and performing 
proxy transformation on the rendered portion of the partially encrypted document comprises a 
combination of performing partial rendering transformations and performing partial 
decryption transformations. 

12. (Previously Amended) The method for using a partially encrypted document 
of claim 1, wherein the session and proxy keys are not usable for directly decrypting the 
partially encrypted document without rendering the portion of the partially encrypted 
document and performing proxy transformation on the rendered portion of the document. 

13. (Currently Amended) A method for using a partially encrypted document, 
comprising: 

receiving a document usage request for using the partially encrypted document 

in a session; 

authorizing use the partially encrypted document; 
creating a session key for the session; and 

issuing a proxy key that delegates decryption to the session, wherein the proxy 
key and the session key enable: 

rendering a non-encrypted portion of the partially encrypted document; 

performing a proxy transformation on the partially rendered, partially 
encrypted document using the proxy key; and 

decrypting the proxy transformed, partially rendered, partially encrypted 
document using the session key, 
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wherein the proxy key and the session key may bo are used to decrypt the 
partially encrypted document as part of the session rendering process only, thereby assuring 
that only rendered images of the decrypted document are available to an end user. 



